This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json) Hash identifier: rLoBXPG5w7anSPu42Gjm2IjvuhBVMZ3yCijAPbwBUq0= Subject key identifier: 19:64:73:50:F7:1B:B9:C6:51:75:B6:C3:E2:6E:6D:87:67:50:24:84 Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8 Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8 Certificate serial: 019B3DFE96FDEFAFC0505B4C4CC53A504924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 23:00:53 +0000 Manifest this update: Sat 20 Dec 2025 23:00:53 +0000 Manifest next update: Sun 21 Dec 2025 23:00:53 +0000 Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: pa1QpKUMN412VGSeehWS7gmSx8ixTXxLVtm1G1X1KOw=) 2: NqaLmcA0hS3kbvvGXTMO3PSyQ-c.roa (hash: /fpzuan/b2/lZgMGOV41W9znkrskBH2VUdOsvVz//ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:96:fd:ef:af:c0:50:5b:4c:4c:c5:3a:50:49:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8 Validity Not Before: Dec 20 23:00:53 2025 GMT Not After : Dec 21 23:00:53 2025 GMT Subject: CN=19647350f71bb9c65175b6c3e26e6d8767502484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:ac:e4:9f:29:f7:08:3c:08:d8:d6:37:c5: 6b:97:06:03:d4:7e:8d:b7:8e:ed:5f:64:b2:f4:ac: 71:00:31:bd:33:1e:ad:f1:3a:6d:0c:91:6a:38:a0: d4:39:55:6a:3e:f8:f5:1f:54:91:ab:d7:6b:77:e4: bd:44:dd:0d:63:43:6c:de:46:42:46:14:5d:ec:3d: a2:58:5e:3e:fd:22:d3:cf:1b:9a:3b:2a:41:39:03: 3d:f1:e9:c3:da:04:e8:4f:e5:cb:4f:87:fd:71:5c: c5:7d:97:a2:63:53:55:d9:74:48:19:1d:9c:0e:f8: e7:c7:dc:e4:7f:72:ce:06:bc:04:f7:47:2b:5b:e7: 84:ee:3e:2a:ae:81:25:2f:1d:b2:17:d1:26:7b:7d: 42:23:ef:68:04:33:be:1d:72:91:46:ff:7e:2d:1f: 13:e6:0d:b3:93:c8:63:06:e1:8b:3e:6f:8e:e5:2f: 52:97:58:bb:48:e6:14:25:53:f1:e3:3c:03:09:23: af:ad:57:c8:0b:a3:f7:6b:69:85:b8:df:fa:08:3b: 3a:6c:74:96:2d:75:de:8d:f8:5d:96:41:90:be:d5: 7c:b3:38:7d:5d:13:e2:56:8a:43:24:e5:36:31:30: 94:31:07:c4:b0:28:9f:0a:fb:c7:7d:50:a1:51:a2: af:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:64:73:50:F7:1B:B9:C6:51:75:B6:C3:E2:6E:6D:87:67:50:24:84 X509v3 Authority Key Identifier: keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f3:aa:05:37:32:a5:c1:50:d4:5b:94:74:ec:5d:0d:1f:66: 58:72:13:83:6b:e3:3f:15:9f:59:ed:a4:82:4a:f0:6e:0d:82: 70:1c:fe:7d:2f:30:f9:76:45:c5:71:3e:54:b2:f9:8d:90:08: 2e:55:9d:58:50:71:0b:81:f7:52:88:6c:48:32:21:28:7b:83: b6:88:5d:21:ae:e1:95:b2:2c:ab:bf:80:61:9c:2b:36:7d:d1: eb:c3:c4:38:b1:0f:8f:9a:09:62:97:77:f9:ce:50:c9:aa:36: ce:f3:65:32:ec:6a:40:18:fb:bc:53:e5:7f:02:35:3c:14:48: 69:e9:22:47:4c:99:de:44:05:87:10:cc:82:2f:8e:63:e9:ff: d0:b4:d3:7e:1f:f2:86:55:7c:bb:b2:b2:77:f2:19:6c:76:5f: 18:66:66:a8:c0:42:0d:fd:31:60:31:d7:3a:8f:0a:79:ce:2d: 89:f4:8d:f7:5f:b9:b5:be:0b:5a:5c:f3:75:e5:10:7c:a3:3f: 65:62:51:a8:91:73:c6:b2:08:9e:5d:05:54:30:21:bd:a8:51: 0a:5d:4e:c8:9c:3b:e1:9e:8a:f4:22:7c:80:60:6a:3e:bc:3e: a6:b8:1e:29:d1:ff:45:2b:1a:3d:6d:ff:4c:b5:2a:48:5b:eb: d3:5d:df:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pb976/AUFtMTMU6UEkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YjhlZDk4NWVmMjAzNGU4ZTMwN2M0NDdmMzQ5NmMzMmFk YWQyYzgwHhcNMjUxMjIwMjMwMDUzWhcNMjUxMjIxMjMwMDUzWjAzMTEwLwYDVQQD EygxOTY0NzM1MGY3MWJiOWM2NTE3NWI2YzNlMjZlNmQ4NzY3NTAyNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuKs5J8p9wg8CNjWN8VrlwYD1H6N t47tX2Sy9KxxADG9Mx6t8TptDJFqOKDUOVVqPvj1H1SRq9drd+S9RN0NY0Ns3kZC RhRd7D2iWF4+/SLTzxuaOypBOQM98enD2gToT+XLT4f9cVzFfZeiY1NV2XRIGR2c Dvjnx9zkf3LOBrwE90crW+eE7j4qroElLx2yF9Eme31CI+9oBDO+HXKRRv9+LR8T 5g2zk8hjBuGLPm+O5S9Sl1i7SOYUJVPx4zwDCSOvrVfIC6P3a2mFuN/6CDs6bHSW LXXejfhdlkGQvtV8szh9XRPiVopDJOU2MTCUMQfEsCifCvvHfVChUaKvUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlkc1D3G7nGUXW2w+JubYdnUCSEMB8GA1UdIwQY MBaAFAa47Zhe8gNOjjB8RH80lsMq2tLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQt ZWJlYjlhOTkxNDg4LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQtZWJlYjlhOTkxNDg4 LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavOqBTcy pcFQ1FuUdOxdDR9mWHITg2vjPxWfWe2kgkrwbg2CcBz+fS8w+XZFxXE+VLL5jZAI LlWdWFBxC4H3UohsSDIhKHuDtohdIa7hlbIsq7+AYZwrNn3R68PEOLEPj5oJYpd3 +c5Qyao2zvNlMuxqQBj7vFPlfwI1PBRIaekiR0yZ3kQFhxDMgi+OY+n/0LTTfh/y hlV8u7Kyd/IZbHZfGGZmqMBCDf0xYDHXOo8Kec4tifSN91+5tb4LWlzzdeUQfKM/ ZWJRqJFzxrIInl0FVDAhvahRCl1OyJw74Z6K9CJ8gGBqPrw+prgeKdH/RSsaPW3/ TLUqSFvr013fcA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:58:07 2025 by rpki-client